ZDI-CAN-17961: ZDI-23-117: VMware vRealize Log Insight setConfig Missing Authentication for Critical Function Remote Code Execution Vulnerability
Published Feb 9, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware vRealize Log Insight. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
VMware vRealize Log Insight
Event History
Feb 9, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-17961?
The vulnerability ZDI-CAN-17961 has a high severity rating due to the potential for remote code execution without authentication.
2
How do I fix ZDI-CAN-17961?
To address ZDI-CAN-17961, it is recommended to update VMware vRealize Log Insight to the latest patched version.
3
Who is affected by ZDI-CAN-17961?
ZDI-CAN-17961 affects installations of VMware vRealize Log Insight that are not updated to the latest security releases.
4
Can ZDI-CAN-17961 be exploited without user interaction?
Yes, ZDI-CAN-17961 can be exploited remotely without any user interaction required.
5
What type of attacks can ZDI-CAN-17961 facilitate?
ZDI-CAN-17961 allows attackers to execute arbitrary code, which could lead to complete system compromise.